splunkfornagios vs spluk2nagios

[jlch]

Hi Luke, I am new to Splunk. I am planning to integrate it with Nagios. After being ready to use splunk2nagios, I found your app. What I get from reading your description is that yours is an evolution of splunk2nagios wich, among other things, makes it easier to configure the exchange of information between Nagios and Splunk, when they are in different machines. Am i getting it right?

Cheers,

JL

[lukeh]

Hi JL 🙂

I actually developed Splunk for Nagios specifically for Splunk 4.x and independently from splunk2nagios.

Splunk for Nagios features a script that can send alerts to Nagios from Splunk, eg. you can schedule a saved search in splunk and inject the search results into a nagios alert.

The app also allows you to search your nagios logs and it features a dashboard too 🙂

All the best,

Luke 🙂

[jrodman · Accepted solution]

splunk2nagios, the app, is pretty dated. http://splunkbase.splunk.com/apps/All/3.x/app:splunk2nagios

It was written for splunk as it existed about 2-3 years ago. Splunk has changed a good deal in that time.

Some aspects of the integration may still work, but some will not, and there would be a lot of poking at the system to figure out how to wire things up. Using it would probably require nagios and splunk expertise, and some ability to read scripts and work around issues.

Splunk For Nagios, the app, is from the last year. http://splunkbase.splunk.com/apps/All/4.x/app:Splunk+for+Nagios

It was written during the 4.x era, so I would expect it to work. The author listed is 'lukeh', not 'Splunk', which means essentially the app is authored by a third party, or at least that we have not signed up to directly support this specific app through general Splunk Support channels. We will still of course support customers using Splunk who use third party apps, but the support may not extend to specific setup and knowledge about use of the app.

[jlch]

Hi jrodman, thanks for your quack answer